Oneuptime vulnerabilities
26 CVEs and advisories name Oneuptime as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-112047OneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI Actions
- CVE-2026-80350OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL
- CVE-2026-45102OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion
- CVE-2026-35053OneUptime: Unauthenticated Workflow Execution via ManualAPI
- CVE-2026-34840OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification
- CVE-2026-34759OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure
- CVE-2026-34758OneUptime: Missing Authentication on Notification Endpoints
- CVE-2026-33396OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe
- CVE-2026-33142OneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters
- CVE-2026-33143OneUptime: WhatsApp Webhook Missing Signature Verification
- CVE-2026-32598OneUptime: Password Reset Token Logged at INFO Level
- CVE-2026-32308OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose")
- CVE-2026-32306OneUptime ClickHouse SQL Injection via Aggregate Query Parameters
- CVE-2026-30959OneUptime has WhatsApp Resend Verification Authorization Bypass
- CVE-2026-30958OneUptime: Path Traversal — Arbitrary File Read (No Auth)
- CVE-2026-30957OneUptime Synthetic Monitor RCE via exposed Playwright browser object
- CVE-2026-30956OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header
- CVE-2026-30921OneUptime Synthetic Monitor RCE via exposed Playwright browser object
- CVE-2026-30920OneUptime has broken access control in GitHub App installation flow that allows unauthorized project binding
- CVE-2026-30887OneUptime Affected by Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE
- CVE-2026-28787OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay
- CVE-2026-27728OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
- CVE-2026-27574OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE
- CVE-2025-66028OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulation
- CVE-2025-65966OneUptime Unauthorized User Creation via API
- CVE-2024-29194OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation